none
FIM CM, Smart Cards, Printing Photo

    Question

  • Is anyone successfully using the IDcentre 6.5 software, with FIM CM, to print a smart card with a photo on it, where the photo is coming from AD, because that is the only mapping source available in FIM CM?  If not, how are you getting your photo onto the smart card ID?

    We can do everything but the photo part.

    Thursday, November 15, 2012 2:39 PM

Answers

  • I am the person who set up the two clients that used FIM CM for printing smart cards.

    - One abandoned it because of the complexities and issues that kept coming up

    - The other is an out of country client that cannot be discussed

    Although it may have sounded like a frivolous answer, I recommend looking at smart card printing products and separate the printing of the smart cards from the issuance of the certificates for the smart cards. The current printing solution just does not support anything other than simplistic printing of names and information taken from the AD/FIM CM database that are text based.

    Brian

    • Marked as answer by gdtilghman Wednesday, December 05, 2012 2:46 PM
    Friday, November 16, 2012 6:15 PM
  • Just so everyone knows....Microsoft finally fixed the problem and we have successfully printed and enrolled smart cards with certificates all in one batch....photo included.  The key to the photo thing and I don't know if this has always been possible or only with the PSS provided hotfix, but in the profile template, configure your photo attribute like this:  Picture:{User!thumbnailPhoto!binary}  Picture is the name of the field you placed in the IDCentre designer of the card.  The key was adding !binary at the end of the attribute you were attempting to pull the info from.

    I would like to know from anyone if doing this without the PSS provided latest hotfix would solve their issue.

    • Marked as answer by gdtilghman Monday, March 25, 2013 5:12 PM
    Monday, March 25, 2013 5:11 PM

All replies

  • Here is a real short answer.

    Do not use the printing functionality of FIM CM.

    1) It sucks

    2) It depends on other vendor's software

    3) It does not integrate well with the other vendor's software

    4) The supported printers appear on Antiques road show

    Brian

    • Proposed as answer by Thomas Houston Thursday, November 15, 2012 9:36 PM
    • Unproposed as answer by gdtilghman Thursday, November 15, 2012 9:37 PM
    Thursday, November 15, 2012 3:24 PM
  • Wish i could mark it as an answer, but we are between a rock and a hard place on this one.  It seems that at least a few people have configured the whole solution, but I can't get a straight answer on the photo question.

    It was funny though.

    Thursday, November 15, 2012 9:38 PM
  • On Thu, 15 Nov 2012 21:38:50 +0000, gdtilghman wrote:

    Wish i could mark it as an answer, but we are between a rock and a hard place on this one.? It seems that at least a few people have configured the whole solution, but I can't get a straight answer on the photo question.

    You may want to consider opening a case with PSS. I'm with Brian, the out
    of the box smart card printing with FIM CM is, umm, challenging. :-)


    Paul Adare
    MVP - Forefront Identity Manager
    http://www.identit.ca
    You forgot to do your backup 16 days ago.  Tomorrow you will need that
    version.

    Friday, November 16, 2012 2:26 AM
  • Ticket has been opened for a while now.  They finally got to the point where they understand its a software issue and not the printer.  We are waiting on them to make a decision to support or not based on results of the business impact assesment.  I posted here to get an idea from the community if anyone had successfully implemented and how.  Very strange to me how no one in the community or world even has used FIM CM or CLM to print a photo on what is essentially always considered to be an ID, not just a smart card for 2 factor authentication.
    Friday, November 16, 2012 3:16 PM
  • On Fri, 16 Nov 2012 15:16:19 +0000, gdtilghman wrote:

    Very strange to me how no one in the community or world even has used FIM CM or CLM to print a photo on what is essentially always considered to be an ID, not just a smart card for 2 factor authentication.

    We have at least one customer who is (was?) using CM to print their cards
    but it really isn't that common. One of the main reasons that a lot of
    customers aren't interested in using a smart card management system to
    print stuff on their cards is that by the time they get around to deploying
    smart cards, they've already got an ID printing solution in place and for
    various reasons prefer to keep on using that solution for printing.


    Paul Adare
    MVP - Forefront Identity Manager
    http://www.identit.ca
    SCCS, the source motel!  Programs check in and never check out!  -- Ken
    Thompson

    Friday, November 16, 2012 3:24 PM
  • Would it be difficult to get them in touch with us?
    Friday, November 16, 2012 3:26 PM
  • I am the person who set up the two clients that used FIM CM for printing smart cards.

    - One abandoned it because of the complexities and issues that kept coming up

    - The other is an out of country client that cannot be discussed

    Although it may have sounded like a frivolous answer, I recommend looking at smart card printing products and separate the printing of the smart cards from the issuance of the certificates for the smart cards. The current printing solution just does not support anything other than simplistic printing of names and information taken from the AD/FIM CM database that are text based.

    Brian

    • Marked as answer by gdtilghman Wednesday, December 05, 2012 2:46 PM
    Friday, November 16, 2012 6:15 PM
  • You are correct.  Microsoft dropped the ball on this.  Whomever would design a "complete" solution but leave out the possibility of printing a photo on a smart card is a complete dolt.  Seriously.  At any rate, we are now looking at the Gemalto complete solution as well as the HID/Fargo possibility which apparently Microsoft itself uses to print their own smart/ID cards....they don't even use their own product, much like DPM....whatever.

    For those struggling and also cannot afford to get another solution to the photo issue....your only option as of the date of this writing is to basically print the card twice.  Either have FIM CM initiate the printing of generic text based attributes along with certificate enrollment on the card and then put the card back into the printer and initiate a second print of the photo...either captured or from existing database storage, or do it the opposite way...print photo first, then initiate print of text and enrollment.

    Extremely inefficient.  "Bulk issuance and printing" wait...wha?....I can't do that?  LOL

    Wednesday, December 05, 2012 2:46 PM
  • Just so everyone knows....Microsoft finally fixed the problem and we have successfully printed and enrolled smart cards with certificates all in one batch....photo included.  The key to the photo thing and I don't know if this has always been possible or only with the PSS provided hotfix, but in the profile template, configure your photo attribute like this:  Picture:{User!thumbnailPhoto!binary}  Picture is the name of the field you placed in the IDCentre designer of the card.  The key was adding !binary at the end of the attribute you were attempting to pull the info from.

    I would like to know from anyone if doing this without the PSS provided latest hotfix would solve their issue.

    • Marked as answer by gdtilghman Monday, March 25, 2013 5:12 PM
    Monday, March 25, 2013 5:11 PM